Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 19:29

General

  • Target

    db12399cfa94a3003eb603a2a5bab6dc_JaffaCakes118.html

  • Size

    4KB

  • MD5

    db12399cfa94a3003eb603a2a5bab6dc

  • SHA1

    2db9dd88e50c946a3929f87bc9bfaeb95b5ddf2a

  • SHA256

    4bad87ffc02a809469d40c3872c7c89bd200844aba2ec4ec62e5cbb3e52ae5e8

  • SHA512

    fecf1c6906a0510d4137d654ca065afe316d237dadd44bb217053102faf047a88c1648ecb3df99b5411e29f03846b4dbad43810d0ecab3ab4e5a7c339fa7cc31

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oQHcJ4d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db12399cfa94a3003eb603a2a5bab6dc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e6ddf28e30034083ca3c6761faf30b8

    SHA1

    3ca8a5eba7e85b49848d153101341e396e33c874

    SHA256

    40d8b94ca81104fe4798232adc8e2d7b0bbbea1085a308e525295ad9f684d857

    SHA512

    80c2b47939a7fee747af05bd30406579fec34fb96e393344dca5585ca2321da3ac1df42888c53bac18f73764360f4c17abdd2e3e34d7324e4a87b47b90130def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad272d7c56f7232a4bc186b3343c4c4e

    SHA1

    485e1942603060aea9114b6c5b8d817dd239c46c

    SHA256

    7c15b5d1a083bb2586e5495261efb0bfd24b9f1ab0da301b8e82257ce152d443

    SHA512

    fa0d26f86e59cb93143832f2a7bdf441776e632fd3bcdab1e5ccf881fa2ab596b08081f1e469b35536a68322092eb56ae52b0fbf047ae42192a6903690f8279b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9758e6fbc1a15d667bbdb55a2b26b831

    SHA1

    0f6b03f7b0d9f659e89cfcb7d8ce9657de490256

    SHA256

    4f6a1738ca21f4ff39fa8d00159b9ab7878e3e221edaf9f2269ab5c052b5195e

    SHA512

    68668fdb31a6f7605516a369c64ea7ecd800a4879e19bfae2857006e4e24c28f8dcbc9ecd3c17af5fa4f12792a03c36fdeebcc534df3c96321aec8d5b2aaf1b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0630becb7e4eec4277ae77e2af5f7cd8

    SHA1

    1ab9362370486e774df2086597bda5ea5c01682d

    SHA256

    10d7895c64241b3b5417bbabfd1fa9b8c5623307d2fa6cb4831403015f9e2b9b

    SHA512

    8745eb2b9426510157400749d7d81eeeee5f07c003575e08dcb7741ca3f391fe55048d92d12d9d2170856588ac174234b446066944844e5798530d951cac4862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8149557570e01d8d41264c6e72d73714

    SHA1

    b12f7f29098428db8af23ae91b7d5174ef605495

    SHA256

    f2487831b0c1cde26c8e78dd73eec248e56c5d0a72b0c611685b4ea1391727f0

    SHA512

    6413e6b0dd21c4f2f0dcd16b5390e0e04ab8d950a99f2f3a1cea0c75a6612a359e629f51a4c2b6a5fc7bfa75db46df91be76344e5055754035e7446782ed148c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0e9c590d460675a7315a5c05400aaa9

    SHA1

    c4e02238ef7616a7b6eca6701a2ee63ef69ce57d

    SHA256

    7feee084832850d11ecd7b9523699aee410f3436b2910ea991e968337b334e35

    SHA512

    1b839c5b9ac61ff7f16816fdbc7aa18a6affddbe5616667a664928613f49f2f0d5588f29bceb04a7de9e250120dc3342cefc4b85b1e9bfb606cd2b553c91b38f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    632807951a76e06993caeeba417f45af

    SHA1

    d0e141cbf04664cc9e70e4ba3a5db8c5a9b7eeb4

    SHA256

    b6271072a5ff4b4d57c1c982c769a54623c8f6fdd954fca9d8f8ad2112fbdca5

    SHA512

    604dee69459f3d1edccdf37e519281e2e318b7d67f3bb39628513bb40dc78bf60beb459ed528161a0331135bb306f314e20e5504a3f5bd0a5b94f438232ebaba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b86273e3361ae3096a0557b82483741

    SHA1

    67433af89d6df18cb1f373801ceaedd934c713a0

    SHA256

    4b7b061db449fb083e18e541d2ec556feb6771374a2a8f81f4f1b62088af613a

    SHA512

    1378b92eb7f550e37e9ed71c593d9a40aebec8915df83f11f812ca8ff36ef2b1bf48ac6a82810f8f2f3e66d93d48cacde156ac83f101b5551aaa908c5393466d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0706025dab6dbc14a68796c51a108b97

    SHA1

    2c2703669892efbc581e9a2bc02a15fcfe335ba9

    SHA256

    a6a74be508ef51ffb7f9a8c107d4c149d078cf50817d46729d7d715d003b2166

    SHA512

    3c1085acaf1440c1cd6ed329a988a56b8f44a3457e5160a34a2ca13b6689838d5af11ee0cd8de54109258d84c36b111023546b0237d47377f192731410d50bc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7861f588fbae75fab312296e7c42cb1d

    SHA1

    cce317c09148b829eda5e4da820c6835278a7197

    SHA256

    c52e28fb32008f219f275135f293b90f5ec190c8d08a82416cc63b8ba39c62cd

    SHA512

    802f0230080aec0fabe390e371221ecd55a00d750ff81fe7943f4b1e0184b64ebca5364d9c781df7d46d4a137113400db1b423bb62198d98223fc8f4e5b0415f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b54a11e18d6209f214c24898c302a0b8

    SHA1

    a7cf2aa96c1c14e4981fff123c828de0aa160ded

    SHA256

    51e55a5e492c3fb08cd292ee425a65cbbba56b6095111ed928fdd54e005d4be8

    SHA512

    0596f03269d8796c8ed8ec2b46d653d04aed9044e1ba3c5c53a9595e34fd973c0a1051bd4566daaff0fe050b28ce13ef351d0226d117b0ae81fbdce2b4930fa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f036992a26e3bec2ba8de1a9c3ff33a8

    SHA1

    ebeb2649ebe4a836050ca7c2fc691adda4baee67

    SHA256

    7c342f6bd099b1bb9690dac8a5cb07b02f6f2af847b41b34904a8562eaa6f628

    SHA512

    6808877cb3b2a10635ed0dd3e9660da4f84177c1f97b178a9594abdc6157639128c5301fbe3c048aa237604afd4577e722c125c29a84cb4414deddee772b25f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d113a422f5180ee5ea38333693dbb5e

    SHA1

    236aca1a5a2ba04716ca72abfbab1ff0c39e4c03

    SHA256

    3bbf7e69772e76e7eab7eccefb239414c9e5c4206acad8acb9de9818fb35f850

    SHA512

    3a3033eea03621e39b005ae3f8af5c6cec0a876c2b0a9dea81a943997fba5cccc5e2dde19c19bec1b61a199d17217dc4f9474705d245fe1c4c91206e495a7d8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3309c87a0a767c5129746009b4aa98cc

    SHA1

    8495fa79b90201ee9eabb8570b84d5ed79f04621

    SHA256

    37263b92ecb7f0c2b364c08ac6077e89c1525118d0ff47762975556aa6023033

    SHA512

    df7a1f926ad663345ef93a41797533f03d940d94a6dd0ad23d0af9d1cc8315b25ffc12050cebf7f3ec1a36e021822e53d2e34e78057f0aa889137e1e741542d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1978410240255647317c8d48ae30319f

    SHA1

    923ba9bc996e125fc727ac9ada7070f2a14d1460

    SHA256

    69ad6f518d057deeeacef8d0773e41c3c96b2ee337e2b9642ef4581383acfd3a

    SHA512

    09e05e37320ccb020e20410e645f15a5b2af11f4d23897c08a278d761136925c58805ea96fa95f42d76948490146d498a58e7fa1f8aa0cf8f36fe5ccecc757a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f971cbd52b83efd31dd2dda29ccaeac0

    SHA1

    90ff711ef87bfeca620ea751d4c7840e25e6c2e3

    SHA256

    c39a03a55be42ceb048256ef84563bf7a47c4f9388ee8ab846f88fc6d8bd041d

    SHA512

    57c6ef3f70822f7c7f482ac6a61e231352bc8c8398a614bca10faefed2e5f4a869933661298638f0b9ade0cf945e2c668ee5ed00de4c1b08e49dff9edc198672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3ce2060e59efaf15b7a61f60d547335

    SHA1

    022c7d3700665efa2c490b8316c65207340804ea

    SHA256

    e99ce689205af756fc379e4c437131dddea67cd576785692f8928ae2cb5bdeba

    SHA512

    fb48ee4cf25adeaac4ba05f39078f4501145e40a4c89dceedd8104c40614f4ee6f344bd935d1dabf03edef04b829956fd4b50d33d20ad152e8f16127e02478c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be30758b3d9e473f1a3f093cec18b68a

    SHA1

    cdc97d834468c12b81b496e065d89d115cf5c66f

    SHA256

    53d7fedf21dd989e216e75062c69971b2cb12f72c61a4d0e92af519bff433f69

    SHA512

    d9b0ff21ffd0345abcbf52e2efc1bddeed207973ba2e0c9ab7fd4553cc6d7961e164bcd4ffd9363cd8dade11fa0bb0c947e78bd1d6d99696b777a86e217a92f7

  • C:\Users\Admin\AppData\Local\Temp\CabB76E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC401.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b